http://www.macnn.com/articles/04/05/04/apple.security.advistories/
Apple criticized for security advisories
updated 10:00 pm EDT, Tue May 4, 2004
Apple security advistories
Security analysts are , saying that the company is severely downplaying the seriousness: "Five vulnerabilities released Monday affect various components of the Mac OS X operating system. The greatest threat is a buffer overflow in the Apple file-sharing system that could allow a remote attacker to take over control of the system. But the company described it as a correction 'to improve the handling of long passwords.'... Most security companies normally classify a remotely exploitable software flaw as a 'critical' vulnerability."
Fresh-Faced Recruit
Joined: Jun 2000
Pfft
It's a ZDNet article, so you know it's 100% objective. ;-)
From the article:
"They are not characterizing the issue so that people can make a security decision about it," said Chris Wysopal, vice president of research and development at @Stake, a digital security firm that found the flaw and reported it to Apple. "It seems they think that everyone will update their computers all the time, and that is not the way the world works."
That's not the way the *Windows* world works, bub, because the dumb users don't know to update and the smart users are afraid to update lest the update break a critical app. Mac users *always* install their patches-- we might wait up to a week to make sure everything's cool, but we always install our patches.